$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec/b921f4b5-6208-4a75-ac7f-bccbae140dec.mft File: b921f4b5-6208-4a75-ac7f-bccbae140dec.mft (raw, json) Hash identifier: 2zWttOlwlNF3F7j/qcAEzIlvaJqHAmFBJZS/Vy8U7P4= Subject key identifier: 5C:39:F1:04:AF:8A:61:0A:3C:B1:A8:2F:52:F5:01:22:36:0C:A1:E2 Authority key identifier: F4:63:83:48:24:6E:C2:60:A5:90:BF:41:DE:54:74:30:83:06:58:95 Certificate issuer: /CN=b921f4b5-6208-4a75-ac7f-bccbae140dec Certificate serial: 010D0C9F4328584F41306535C0D1927F69A1E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec/b921f4b5-6208-4a75-ac7f-bccbae140dec.mft Manifest number: 010D0C9F432858436EF8A12385AA884F52666E3C Signing time: Tue 22 Sep 2026 02:00:23 +0000 Manifest this update: Tue 22 Sep 2026 02:00:23 +0000 Manifest next update: Fri 25 Sep 2026 02:00:00 +0000 Files and hashes: 1: b921f4b5-6208-4a75-ac7f-bccbae140dec.crl (hash: FtrW8Vf0tu5QLqjUBuYnVFeDaWFjMmZquEHMosfiqyA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec/b921f4b5-6208-4a75-ac7f-bccbae140dec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec/b921f4b5-6208-4a75-ac7f-bccbae140dec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:30:65:35:c0:d1:92:7f:69:a1:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b921f4b5-6208-4a75-ac7f-bccbae140dec Validity Not Before: Sep 22 02:00:23 2026 GMT Not After : Sep 25 02:00:00 2026 GMT Subject: CN=49bdaf29-da0c-4ac8-abc8-2d5d0acfb69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:cb:75:e2:a7:ea:ee:6a:35:6f:b5:b2:b6: 1f:fd:56:23:31:7d:25:d2:c9:28:07:c1:03:17:31: 2e:a1:46:af:93:8e:2f:6b:a2:cb:e6:1a:11:47:d9: bc:66:38:20:9e:2d:62:ca:c4:33:d5:c7:cb:38:58: d9:94:8f:8e:eb:48:91:42:f6:95:45:20:d5:e4:f4: 91:c6:4f:66:d0:7c:e9:00:d8:e0:6f:86:45:ed:2e: fd:30:dc:89:6a:83:a2:f0:cd:d4:29:6d:4f:2e:7a: 1d:26:e7:42:b2:68:21:ab:42:f6:df:6a:ad:f5:26: 52:92:20:50:80:fc:6c:04:77:9d:4c:a7:90:06:53: a7:14:ef:ef:7b:1b:65:e4:f6:a8:dc:54:fc:73:94: ad:a6:1a:91:2e:7d:0f:70:11:a5:20:43:1b:a3:80: 9c:4d:57:0e:59:4b:a9:af:be:e1:c5:4b:59:22:fb: e4:83:15:22:6b:9a:8f:5e:a3:c8:e8:59:b5:61:fb: 00:a9:11:5c:f1:43:2c:23:8c:10:41:ab:00:68:14: 8f:d9:61:ce:57:98:38:fe:60:3a:e7:b1:92:de:2c: bb:4b:a3:46:11:ce:3e:7a:1b:c5:2a:30:ab:ab:fd: 2c:b8:de:f3:20:9d:a0:3f:bb:06:cb:4e:5c:4a:da: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:39:F1:04:AF:8A:61:0A:3C:B1:A8:2F:52:F5:01:22:36:0C:A1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec/b921f4b5-6208-4a75-ac7f-bccbae140dec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec/b921f4b5-6208-4a75-ac7f-bccbae140dec.crl X509v3 Authority Key Identifier: keyid:F4:63:83:48:24:6E:C2:60:A5:90:BF:41:DE:54:74:30:83:06:58:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b921f4b5-6208-4a75-ac7f-bccbae140dec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9d:5a:85:1e:fd:73:ce:26:ac:0d:34:3b:28:bd:55:7c:ff: a8:6b:73:e8:70:93:44:9d:d6:33:d0:4d:f1:41:83:d5:9d:fa: bf:f9:0f:03:e7:54:f6:c9:8d:11:99:cf:11:6e:69:3c:39:b3: 68:02:f1:12:04:c7:d4:88:95:77:48:f7:34:92:e7:fe:8e:78: b4:ba:f0:68:bf:ff:18:78:e3:ce:4c:a4:ab:04:12:b8:37:fc: f7:c4:37:5c:b5:6b:1a:b1:64:4f:e9:b2:ad:e6:14:34:f5:67: f2:1a:66:2d:72:89:df:7e:ce:46:81:d3:3f:a9:5d:d6:4f:4a: e0:6e:4f:bd:c4:53:bf:6b:2d:54:16:5b:48:ed:cd:2d:20:9d: 73:a1:3f:24:a4:1d:13:07:a5:93:16:d1:fe:78:eb:31:5b:0b: a5:35:c6:f4:81:e5:f9:95:5c:24:1e:41:3b:52:89:0a:d8:18: 53:d9:37:8f:86:b4:db:f6:fc:69:95:b4:9a:a1:d9:a5:1c:a5: af:62:d6:8d:63:55:80:b2:9e:ae:5c:ae:bd:2b:a4:69:9a:0d: b2:3c:a2:75:fe:a7:d9:13:03:03:82:05:cc:53:53:5f:15:80: ee:28:51:a2:9e:ba:12:0e:66:42:d6:c4:8e:48:9e:8a:d1:fc: 05:0c:56:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9BMGU1wNGSf2mh5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyMWY0YjUtNjIwOC00YTc1LWFjN2YtYmNjYmFlMTQw ZGVjMB4XDTI2MDkyMjAyMDAyM1oXDTI2MDkyNTAyMDAwMFowLzEtMCsGA1UEAxMk NDliZGFmMjktZGEwYy00YWM4LWFiYzgtMmQ1ZDBhY2ZiNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49/LdeKn6u5qNW+1srYf/VYjMX0l0skoB8ED FzEuoUavk44va6LL5hoRR9m8Zjggni1iysQz1cfLOFjZlI+O60iRQvaVRSDV5PSR xk9m0HzpANjgb4ZF7S79MNyJaoOi8M3UKW1PLnodJudCsmghq0L232qt9SZSkiBQ gPxsBHedTKeQBlOnFO/vextl5Pao3FT8c5StphqRLn0PcBGlIEMbo4CcTVcOWUup r77hxUtZIvvkgxUia5qPXqPI6Fm1YfsAqRFc8UMsI4wQQasAaBSP2WHOV5g4/mA6 57GS3iy7S6NGEc4+ehvFKjCrq/0suN7zIJ2gP7sGy05cStpY1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFw58QSvimEKPLGoL1L1ASI2DKHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOTIx ZjRiNS02MjA4LTRhNzUtYWM3Zi1iY2NiYWUxNDBkZWMvYjkyMWY0YjUtNjIwOC00 YTc1LWFjN2YtYmNjYmFlMTQwZGVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjkyMWY0YjUtNjIwOC00YTc1LWFj N2YtYmNjYmFlMTQwZGVjL2I5MjFmNGI1LTYyMDgtNGE3NS1hYzdmLWJjY2JhZTE0 MGRlYy5jcmwwHwYDVR0jBBgwFoAU9GODSCRuwmClkL9B3lR0MIMGWJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOTIxZjRiNS02MjA4LTRhNzUtYWM3Zi1iY2Ni YWUxNDBkZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3nVqFHv1zziasDTQ7KL1V fP+oa3PocJNEndYz0E3xQYPVnfq/+Q8D51T2yY0Rmc8Rbmk8ObNoAvESBMfUiJV3 SPc0kuf+jni0uvBov/8YeOPOTKSrBBK4N/z3xDdctWsasWRP6bKt5hQ09WfyGmYt conffs5GgdM/qV3WT0rgbk+9xFO/ay1UFltI7c0tIJ1zoT8kpB0TB6WTFtH+eOsx WwulNcb0geX5lVwkHkE7UokK2BhT2TePhrTb9vxplbSaodmlHKWvYtaNY1WAsp6u XK69K6Rpmg2yPKJ1/qfZEwMDggXMU1NfFYDuKFGinroSDmZC1sSOSJ6K0fwFDFZ5 -----END CERTIFICATE-----Generated at Tue Sep 22 21:52:41 2026 by rpki-client